Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
If my Drobo5N gets stolen, is my data protected or do I need encryption?
01-18-2017, 05:42 AM
Post: #1
If my Drobo5N gets stolen, is my data protected or do I need encryption?
Hello forum,

just to get the security things right: How can the Drobo5N be used, if it is (physically) out of my control (e. g. stolen or accesses by a third party with via network cable)?

What do I have to do with respect to data security in this context (physical access by third parties)?

A) Don't bother, it is safe (e. g. password needed to connect)!
B) You'd better use encryption! OR
C) You don't know much about Drobo, do you? Drobo does the following to protect your data: "your text"

Wink

Thanks for your help!
Find all posts by this user
Quote this message in a reply
01-18-2017, 07:05 AM
Post: #2
RE: If my Drobo5N gets stolen, is my data protected or do I need encryption?
The shares you created on the device should have passwords - you did create passwords didn't you Wink

Bending metal in Hertfordshire - DD Metal Products
Find all posts by this user
Quote this message in a reply
03-20-2017, 02:48 PM
Post: #3
RE: If my Drobo5N gets stolen, is my data protected or do I need encryption?
I am really interested in understanding this in detail. Let's assume that shares are password protected. What would happen if the thief takes out the disks from my 5N and installs them into a 5N to which s/he has an administrator access?

Would Drobo simply recognizes the disks and give full administrative access my shares to the thief or would Drobo ask for share passwords before making shares available (e.g. for configuration on the dashboard)? Simple enough to experiment, but I don't have the resources to do so. Does anybody know?

This article:

http://support.drobo.com/app/answers/det...http://support.drobo.com/app/answers/detail/a_id/274/~/can-i-move-my-disk-pack-(-drives-)-from-one-drobo-storage-device-to-

Seem to suggest that the thief is going to be able to gain full access. Combined with the ability to pinhole-reset the Drobo controller (below), the thief don't even need his/her own unit. S/he could 1) pull out the disks, 2) pinhole-reset the controller and gain administrator access and 3) re-install the disks to get at my data.

http://support.drobo.com/app/answers/det...http://support.drobo.com/app/answers/detail/a_id/32/~/how-can-i-clear-all-my-data-off-my-drobo-storage-device-and-sta

Physical security is #1, but what other options do we have to protect against data theft? Is there a bitlocker-like option for 5N?
Find all posts by this user
Quote this message in a reply
03-20-2017, 06:02 PM (This post was last modified: 03-20-2017 06:25 PM by Paul.)
Post: #4
RE: If my Drobo5N gets stolen, is my data protected or do I need encryption?
hi am not to sure about this, but i would imagine that the best thing will be to encrypt your data first, that way if said thief does gain physical access to steal the unit (or drives and unit), there will at least be a fair amount of time elapsed before any data is possibly accessed by brute force etc, as is the case with any password based protection.

(i still need to set-up my 5n but i think the initial setup will have a public share, so if at least your private shares require passwords, it will probably be good for you to not use the public share for important or sensitive data too)


(funnily-enough, not all thieves are bad... humburglar is classed as a good thief) Smile

(btw i have XP home SP2, a Drobo v1 with 2x 1TB/2x 1.5TB WD greens, & a bkp Drobo v2 with the same + a DroboShare: unused)
& a DroboS v2 with 3xWD15EADS &2x1TB in DDR mode on win7, & a drobo5D (all usb)
  • btw i did a sustained (write) operation for about 6 hours, and got 13.2MB / sec ...objection? "sustained" :)
    (16.7MB/s on a v2 & 47-96MB/s drobo-s)
Find all posts by this user
Quote this message in a reply
03-24-2017, 12:58 AM
Post: #5
RE: If my Drobo5N gets stolen, is my data protected or do I need encryption?
Thanks Paul!

Encryption would certainly be more complete but will be quite heavy-handed. Search yields TrueCrypt, VeraCrypt, Ciphershed, etc. These software creates its own large, encrypted file system image on a NAS volume. Doable on paper, and this has been done many times over, but I know there are so many little things and corner cases you need to get right for something like this to work flawlessly. I kind of know from years of experience managing/developing enterprise-class storage software. I wonder how well they are written and supported. I also wonder how these solutions play well with Drobo's thin provisioning.

I'd settle for the password protection of shares working even against somebody with physical access to the Drobo Box. It'd be nice to know if Drobo protects against the simple scenario I outlined above that could allow anyone with physical access to Drobo to gain root access to private shares... Anybody willing to try this out? Smile
Find all posts by this user
Quote this message in a reply
03-24-2017, 08:46 PM (This post was last modified: 03-24-2017 08:47 PM by Paul.)
Post: #6
RE: If my Drobo5N gets stolen, is my data protected or do I need encryption?
while i have only tried (the below) for a large cddb database on my das drobo, (partly because i kept losing internet connection at the time when trying to use the online one), i am fairly sure that a similar approach of having a fixed large file should work without problems, in terms of thin provisioning etc.

for example the 10GB flat file, contained hundreds and hundreds of thousands of tiny text files:
http://www.drobospace.com/forums/showthr...http://www.drobospace.com/forums/showthread.php?
(and i think the key here, is that the structure is flat and rigid... in the sense that if you create a file which takes up a certain size, it always takes up that much space, even if you havent filled it yet, but should also be fairly robust... i cant remember exactly when i made it but its been several years now and if you try a search for cddb or similar, here, there should be some more info too if you need)

(btw i have XP home SP2, a Drobo v1 with 2x 1TB/2x 1.5TB WD greens, & a bkp Drobo v2 with the same + a DroboShare: unused)
& a DroboS v2 with 3xWD15EADS &2x1TB in DDR mode on win7, & a drobo5D (all usb)
  • btw i did a sustained (write) operation for about 6 hours, and got 13.2MB / sec ...objection? "sustained" :)
    (16.7MB/s on a v2 & 47-96MB/s drobo-s)
Find all posts by this user
Quote this message in a reply
04-17-2017, 04:40 PM
Post: #7
RE: If my Drobo5N gets stolen, is my data protected or do I need encryption?
I finally got to test if a thief can access Drobo 5N content. The short answer is yes. The thief needs to know what s/he is doing, but you don't need know any password to gain access to the contents. I just had to pinhole-reset the Drobo with disks removed, get Drobo initialize with some junk drives installed to gain Admin control, do a clean shutdown and replace the drives with the original pack and reboot.

Something to keep in mind when you place sensitive data on Drobo 5N.
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump: